
Simon Leadbetter
Associate Partner, GCC
GCC practice · UAE
Most organisations in the UAE answer to more than one regime at once: federal law, a free zone such as the DIFC or ADGM, and a sector regulator. Each has its own rules and its own supervisor.
We map them together and run one programme from our Dubai office, so you meet every requirement without building three compliance functions.
The UAE aims to lead in AI adoption. We build AI governance that lets you move quickly and still stand up to regulator review.
The national vision puts digital trust and a competitive economy at its centre. Strong governance supports both.
New duties for digital platforms and service providers that children use. We help assess whether it applies and what to change.
UAE Data Office
The federal data protection authority under Federal Decree-Law 45 of 2021 (PDPL).
DIFC Commissioner of Data Protection
Supervises the DIFC Data Protection Law 2020 and Regulation 10 on autonomous and semi-autonomous systems.
ADGM Office of Data Protection
Supervises the ADGM Data Protection Regulations 2021.
Central Bank of the UAE
Sets regulations and standards for licensed financial institutions, including consumer protection, outsourcing and AML.
Department of Health, Abu Dhabi
Sets health data and cybersecurity standards for healthcare providers in Abu Dhabi.
The federal law applies, but its executive regulations are still awaited. Build the programme now so you are not caught by a short runway.
Organisations deploying AI systems in the DIFC can now be certified. WLC is a DIFC-approved Accredited Certification Body.

Associate Partner, GCC

Associate Partner, Head of AI and Transformation

Junior Associate, Governance, Compliance, and Data Protection
Meet the full team.
Associate Partner, GCC
WhatsApp or call +971 558 701 959, or send us a message.